This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TANET/96fceQ00yrfcf4rjkD4b8-X44ew.roa
File:                     96fceQ00yrfcf4rjkD4b8-X44ew.roa (raw, json)
Hash identifier:          sEcYWKINYSVQ73vENhTPTuQQCAnKHatx3FlCGvf9Zzg=
Subject key identifier:   F7:A7:DC:79:0D:34:CA:B7:DC:7F:8A:E3:90:3E:1B:F3:E5:F8:E1:EC
Certificate issuer:       /CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
Certificate serial:       1113
Authority key identifier: E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/96fceQ00yrfcf4rjkD4b8-X44ew.roa
Signing time:             Tue 03 Feb 2026 01:45:57 +0000
ROA not before:           Tue 03 Feb 2026 01:45:57 +0000
ROA not after:            Sat 22 Aug 2026 08:14:28 +0000
asID:                     1659
IP address blocks:        163.28.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Feb 2026 17:20:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4371 (0x1113)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1A88C34D246EF7C2A7C1AC5FE97B262BC48178E
        Validity
            Not Before: Feb  3 01:45:57 2026 GMT
            Not After : Aug 22 08:14:28 2026 GMT
        Subject: CN=F7A7DC790D34CAB7DC7F8AE3903E1BF3E5F8E1EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0a:13:92:1c:e7:d8:fe:2a:d5:21:41:d9:0f:
                    56:4b:1b:d9:f3:a5:37:a2:3b:0d:dd:ac:b6:2b:dc:
                    04:3a:e9:c9:7f:13:4a:e2:aa:77:a2:f0:62:bf:21:
                    d4:a2:68:8b:08:bc:9f:3e:cc:3f:8e:0a:2c:17:51:
                    60:f5:4a:41:8e:b3:0f:2e:ae:58:fc:7e:f5:5d:59:
                    7e:0c:18:18:1a:73:c0:8b:65:a0:3a:67:0e:8b:7f:
                    ad:e3:92:3d:4b:d4:7e:88:36:79:34:25:17:34:3b:
                    60:f0:79:98:b5:2f:47:50:e8:78:1c:7d:76:da:c5:
                    c9:43:c2:0e:74:99:49:51:30:d2:a6:c4:c9:a8:29:
                    ea:b5:09:89:6b:c1:8d:b4:03:16:16:d4:85:f4:78:
                    95:a3:4f:61:92:40:d3:3d:13:6d:6b:cb:6e:7e:c3:
                    b2:98:50:54:68:a4:0f:25:7b:43:67:01:ab:12:13:
                    9d:36:3b:03:ee:df:3b:24:80:9d:30:3e:3a:f3:84:
                    7f:8c:f7:69:39:22:81:31:71:16:61:35:1f:73:9a:
                    fa:e0:bc:43:ba:49:fe:f6:d0:8d:d9:78:28:9a:ca:
                    5b:43:6d:11:cf:6d:dd:21:cb:7c:7a:63:22:8f:45:
                    7a:d4:1a:0a:b8:ff:4f:bc:98:b5:a6:6b:9f:f2:42:
                    fc:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A7:DC:79:0D:34:CA:B7:DC:7F:8A:E3:90:3E:1B:F3:E5:F8:E1:EC
            X509v3 Authority Key Identifier:
                keyid:E1:A8:8C:34:D2:46:EF:7C:2A:7C:1A:C5:FE:97:B2:62:BC:48:17:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/4aiMNNJG73wqfBrF_peyYrxIF44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4aiMNNJG73wqfBrF_peyYrxIF44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TANET/96fceQ00yrfcf4rjkD4b8-X44ew.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.28.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         86:a8:b8:dc:58:8f:52:55:50:55:5c:7e:74:65:32:15:d8:03:
         51:72:5b:28:a7:d1:bc:eb:a7:cf:00:c0:e5:4f:30:94:c8:72:
         32:88:57:a4:f3:a8:99:10:70:98:8c:d5:6d:1c:f1:5d:df:8a:
         06:ae:3a:f5:01:73:1a:47:61:6f:0e:0c:11:b5:1c:c8:79:ab:
         63:bd:9b:53:00:6a:f2:4f:c4:ad:5d:9f:00:ab:2e:ac:2b:91:
         81:ff:83:b3:bd:39:e3:1c:5d:ca:aa:85:05:6a:3f:a5:4a:b5:
         cf:c3:91:6d:d6:25:ab:84:de:51:c0:6c:89:69:e2:72:68:cf:
         58:91:24:c5:96:9f:49:e9:5b:ab:33:9a:8c:5f:cc:d9:cf:f3:
         b0:09:75:7a:f6:94:4a:73:07:63:15:fb:4e:ff:e3:51:dc:63:
         ed:4a:84:c3:40:ca:65:ad:f8:23:e1:63:66:7e:82:01:3c:c8:
         3a:c3:c3:d7:1d:08:b1:2f:c7:4c:28:ff:56:f2:3d:4c:99:c6:
         9e:dc:d4:30:f1:93:39:54:27:95:5e:31:4b:52:7c:0e:5a:5f:
         e3:0a:9a:35:c4:d3:2d:5e:a5:00:2e:1b:7d:8d:95:72:7d:5f:
         18:74:92:a0:5f:1c:22:5d:91:50:2a:ae:06:25:ed:ba:40:88:
         5c:a0:96:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 12 15:43:47 2026 by rpki-client